diff --git a/renovate.json b/renovate.json
index ea9c019..d57c667 100644
--- a/renovate.json
+++ b/renovate.json
@@ -16,9 +16,10 @@
       "dependencyDashboardApproval": true
     },
     {
-      "description": "Keep routine Go transitive dependency maintenance together.",
+      "description": "Transitive Go modules are off by default; enable so CVE fixes can land.",
       "matchManagers": ["gomod"],
       "matchDepTypes": ["indirect"],
+      "enabled": true,
       "groupName": "Go indirect dependencies",
       "groupSlug": "go-indirect-dependencies"
     }